Policy: AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 01. How do you securely operate your workload? > Secure AWS account

Secure access to your accounts, for example by enabling MFA and restrict use of the root user, and configure account contacts.

See Secure AWS account for more information.

Resource Types

This policy targets the following resource types:

This policy is used with the following primary policy:

Category URI

tmod:@turbot/turbot#/control/categories/other

Policy Type URI

tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01AwsAccount

GraphQL

query policyType(id: "tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01AwsAccount") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01AwsAccount'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01AwsAccount'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01AwsAccount"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01AwsAccount"